WO2017000861A1

WO2017000861A1 - Method and apparatus for learning mac address in virtual local area network of switch

Info

Publication number: WO2017000861A1
Application number: PCT/CN2016/087311
Authority: WO
Inventors: 田湘君
Original assignee: 中兴通讯股份有限公司
Priority date: 2015-06-30
Filing date: 2016-06-27
Publication date: 2017-01-05
Also published as: EP3319276A1; CN106330652A; EP3319276A4

Abstract

Disclosed are a method and apparatus for learning a MAC address in a virtual local area network of a switch. The method comprises: determining whether a quantity of MAC addresses learned in a virtual local area network reaches a limiting condition, the limiting condition comprising one of the following: a preset threshold or a preset dynamic level; and if it is determined that the quantity of MAC addresses learned in the virtual local area network reaches the limiting condition, stopping learning a MAC address that is received after the limiting condition is reached, and processing, in a preset manner, a packet corresponding to the MAC address that is received after the limiting condition is reached, the preset manner comprising one of the following: forwarding or discarding.

Description

Method and device for learning MAC address in switch virtual local area network

Technical field

This document relates to, but is not limited to, the field of communication technologies, and in particular, to a method and device for learning a MAC address in a virtual local area network of a switch.

Background technique

The MAC (Media Access Control) protocol is located in the data link layer of the Open System Interconnection (OSI) seven-layer protocol. It is mainly responsible for controlling and connecting physical media of the physical layer. In a conventional local area network, the physical layer of various transmission media corresponds to the corresponding MAC layer, and the currently widely used network adopts the MAC layer standard of IEEE 802.3. The key to the MAC protocol is the MAC address (ie, the physical address), and the MAC address is a limited resource in each network device.

In a data network, a network device divides a virtual local area network (VLAN) to ensure that communications between different virtual local area networks do not interfere with each other. Broadcast and unicast traffic inside a VLAN is not forwarded to other VLANs, which helps control traffic, reduce equipment investment, simplify network management, and improve network security. If a MAC address flood attack occurs in a certain VLAN, if the virtual LAN occupies all the MAC address resources of the network device, not only the communication in the virtual LAN but also the other virtual LANs will be affected. normal operation.

In the related art, a commonly used network device is a rack switch, and a rack switch is a slot type switch. This switch is widely used in a communication network because of its good scalability. . 1 is a schematic structural diagram of a rack switch in the related art. As shown in FIG. 1 , a rack switch is composed of a plurality of line card processors and a main control processor, and hardware (ie, programmable logic devices) cannot implement the entire The uniform limit of the physical address of a virtual LAN in a rack switch can not accurately control the number of MAC addresses in a virtual LAN of the rack switch, which affects the normal operation of other VLANs.

For the related art, it is impossible to control the problem that the switch virtual local area network learns the MAC address. No effective solution has yet been proposed.

Summary of the invention

The following is an overview of the topics detailed in this document. This Summary is not intended to limit the scope of the claims.

The embodiment of the invention provides a method and a device for learning a MAC address in a virtual local area network of a switch, so as to at least solve the problem that the MAC address of the switch virtual local area network cannot be controlled in the related art.

The embodiment of the invention provides a method for learning a MAC address in a virtual local area network of a switch, which includes: determining whether the number of learned MAC addresses in the virtual local area network reaches a limit condition, wherein the restriction condition includes one of the following: a preset threshold Presetting a dynamic watermark value; if it is determined that the number of learned MAC addresses in the virtual local area network reaches the restriction condition, stopping learning the MAC address received after reaching the restriction condition, and according to the preset The method is configured to process the received MAC address packet, where the preset manner includes one of the following: forwarding, and discarding.

Optionally, if the limiting condition is a preset dynamic watermark value, determining whether the number of learned MAC addresses in the virtual local area network reaches a limiting condition includes: calculating a MAC address learned in all the virtual local area networks of the switch And obtaining a first total MAC address; determining whether the first total MAC address reaches a first preset dynamic watermark value, wherein the first preset dynamic watermark value is a second total MAC address and the first a product of a preset dynamic waterline percentage, wherein the second total MAC address is a sum of MAC addresses in all the virtual local area networks, wherein it is determined that the first total MAC address reaches the first preset dynamic waterline In the case of a value, it is determined that the number of learned MAC addresses in the virtual local area network reaches the constraint condition.

Optionally, determining whether the number of learned MAC addresses in the virtual local area network reaches a limit condition further includes: if it is determined that the first total MAC address does not reach the first preset dynamic watermark value, Determining whether the first total MAC address reaches a second preset dynamic watermark value, wherein the second preset dynamic watermark value is the second total MAC address and the second preset dynamic water value a product of a line percentage, and the second preset dynamic water line value is smaller than the first preset dynamic water line value, wherein, determining that the first total MAC address reaches the second preset dynamic water line In the case of a value, it is determined that the number of learned MAC addresses in the virtual local area network reaches the constraint condition.

Optionally, if it is determined that the first total MAC address reaches the first preset dynamic watermark value, the method further includes: acquiring, in each of the virtual local area networks, a MAC in each of the virtual local area networks The number of addresses; determining whether the number of MAC addresses in the first target virtual local area network in the virtual local area network is greater than or equal to the first preset dynamic water line value; determining that all the virtual local area networks are in the first target virtual local area network If the number of MAC addresses is greater than or equal to the first preset dynamic watermark value, setting a limit value of the number of MAC addresses in the first target virtual local area network is a value of the learned MAC address in the first target virtual local area network. And deleting the MAC address learned in the first target virtual local area network but not used in the preset time period; determining that the number of MAC addresses in the first target virtual local area network in all the virtual local area networks is smaller than the number In the case of a preset dynamic watermark value, determining whether the number of MAC addresses in the first target virtual local area network is greater than or equal to the average value of the MAC address, where The MAC address average is a quotient of the second total MAC address and the number of all the virtual local area networks; and if it is determined that the number of MAC addresses in the first target virtual local area network is greater than or equal to the average value of the MAC addresses And setting a limit value of the number of MAC addresses in the first target virtual local area network to a second preset dynamic watermark value, and deleting the MAC address learned in the first target virtual local area network but not used in the preset time period, The second preset dynamic watermark value is a product of the second total MAC address and a second preset dynamic waterline percentage, and the second preset dynamic watermark value is smaller than the first preset. a dynamic watermark value; if it is determined that the number of MAC addresses in the first target virtual local area network is smaller than the average value of the MAC address, setting a limit value of the number of MAC addresses in the first target virtual local area network is the MAC address average value.

Optionally, if it is determined that the first total MAC address reaches the second preset dynamic watermark value, the method further includes: acquiring, in each of the virtual local area networks, a MAC in each of the virtual local area networks The number of addresses; determining whether the number of MAC addresses in the second target virtual local area network in all the virtual local area networks is greater than or equal to a MAC address average value, wherein the average value of the MAC addresses is the second total MAC address and all the virtual local area networks a quotient of the quantity; determining that the number of MAC addresses in the second target virtual local area network in all of the virtual local area networks is greater than or equal to In the case of the MAC address average, the limit value of the number of MAC addresses in the second target virtual local area network is set to the first preset dynamic watermark value; and it is determined that all the virtual local area networks are in the second target virtual local area network In a case where the number of MAC addresses is smaller than the average value of the MAC addresses, setting a limit value of the number of MAC addresses in the second target virtual local area network is the second total MAC address.

Optionally, after setting a limit value of the number of MAC addresses in the second target virtual local area network to the first preset dynamic watermark value, the method further includes: determining that the second target virtual local area network is in a priority a range of ranges, wherein the priority range is used to indicate whether to continue learning MAC addresses in the second target virtual local area network.

The embodiment of the invention provides a device for learning a MAC address in a virtual local area network of a switch, comprising: a first determining module, configured to determine whether the number of learned MAC addresses in the virtual local area network reaches a limiting condition, wherein the limiting condition includes One of the following: a preset threshold, a preset dynamic watermark value; and a processing module configured to stop learning to reach the limit if it is determined that the number of MAC addresses learned in the virtual local area network reaches the limit condition The MAC address received after the condition, and the packet of the MAC address received after the restriction condition is processed according to a preset manner, where the preset manner includes one of the following: forwarding and discarding.

Optionally, if the limiting condition is a preset dynamic watermark value, the first determining module includes: a statistical unit, configured to collect the sum of the learned MAC addresses in all the virtual local area networks of the statistical switch, and obtain the first The first determining unit is configured to determine whether the first total MAC address reaches a first preset dynamic watermark value, wherein the first preset dynamic watermark value is a second total MAC address and a first a product of a preset dynamic waterline percentage, wherein the second total MAC address is a sum of MAC addresses in all the virtual local area networks, wherein it is determined that the first total MAC address reaches the first preset dynamic water In the case of a line value, it is determined that the number of learned MAC addresses in the virtual local area network reaches the constraint condition.

Optionally, the first determining module further includes: a second determining unit, configured to determine, when it is determined that the first total MAC address does not reach the first preset dynamic watermark value, Whether the total MAC address reaches a second preset dynamic watermark value, wherein the second preset dynamic watermark value is a product of the second total MAC address and a second preset dynamic watermark percentage, and the The second preset dynamic watermark value is smaller than the first preset dynamic watermark value, wherein, when it is determined that the first total MAC address reaches the second preset dynamic watermark value, determining the Virtual local area network The number of MAC addresses learned in the middle reaches the limit.

Optionally, the device further includes: a first acquiring module, configured to acquire, in the case that the first total MAC address reaches the first preset dynamic watermark value, obtain each of the virtual local area networks The number of MAC addresses in the virtual local area network; the second determining module is configured to determine whether the number of MAC addresses in the first target virtual local area network in the virtual local area network is greater than or equal to the first preset dynamic water line value; a setting module, configured to set the first target virtual local area network in a case where it is determined that the number of MAC addresses in the first target virtual local area network is greater than or equal to the first preset dynamic water line value in all the virtual local area networks The limit of the number of MAC addresses is the number of learned MAC addresses in the first target virtual local area network, and the MAC addresses learned in the first target virtual local area network but not used within the preset time period are deleted; a third determining module, configured to determine, in all the virtual local area networks, that the number of MAC addresses in the first target virtual local area network is smaller than the first preset dynamic water line value And determining, in the first target virtual local area network, whether the number of MAC addresses is greater than or equal to a MAC address average, where the MAC address average is a quotient of the second total MAC address and the number of all the virtual local area networks. a second setting module, configured to set a limit value of the number of MAC addresses in the first target virtual local area network when determining that the number of MAC addresses in the first target virtual local area network is greater than or equal to the average value of the MAC addresses Determining a dynamic watermark value, and deleting a MAC address that is learned in the first target virtual local area but is not used in a preset time period, where the second preset dynamic watermark value is a product of a second total MAC address and a second preset dynamic waterline percentage, and the second preset dynamic watermark value is smaller than the first preset dynamic watermark value; and the third setting module is set to determine In a case that the number of MAC addresses in the first target virtual local area network is smaller than the average value of the MAC addresses, setting a limit value of the number of MAC addresses in the first target virtual local area network is an average value of the MAC addresses.

Further, the device further includes: a second obtaining module, configured to acquire, in the case that the first total MAC address reaches the second preset dynamic watermark value, acquire each of the virtual local area networks The number of MAC addresses in the virtual local area network; the fourth determining module is configured to determine whether the number of MAC addresses in the second target virtual local area network in all the virtual local area networks is greater than or equal to an average value of the MAC addresses, and the average value of the MAC addresses is Determining a quotient of the second total MAC address and the number of all the virtual local area networks; and a fourth setting module, configured to determine all of the If the number of MAC addresses in the second target virtual local area network is greater than or equal to the average value of the MAC address in the virtual local area network, setting a limit value of the number of MAC addresses in the second target virtual local area network is the first preset dynamic water line. a fifth setting module, configured to set a limit on the number of MAC addresses in the second target virtual local area network when determining that the number of MAC addresses in the second target virtual local area network is less than the average value of the MAC address in all the virtual local area networks The value is the second total MAC address.

Further, the device further includes: a determining module, configured to determine the second target virtual after setting a limit value of the number of MAC addresses in the second target virtual local area network to the first preset dynamic waterline value The priority range of the local area network, wherein the priority range is used to indicate whether to continue learning the MAC address in the second target virtual local area network.

The embodiment of the invention further provides a computer readable storage medium storing computer executable instructions, which are implemented when executed by a processor.

According to the present invention, it is determined whether the number of learned MAC addresses in the virtual local area network reaches a limit condition, wherein the restriction condition is one of the following: a preset threshold and a preset dynamic watermark value; and the learned in the virtual local area network is determined. If the number of MAC addresses reaches the limit condition, the MAC address received after the restriction condition is stopped is learned, and the MAC address received after the restriction condition is processed according to a preset manner, where the preset mode includes one of the following: : Forwarding or discarding solves the problem that the related technology cannot control the learning MAC address of the switch virtual local area network, thereby achieving the effect of improving the stability of the virtual local area network.

Other aspects will be apparent upon reading and understanding the drawings and detailed description.

BRIEF abstract

1 is a schematic structural diagram of a rack switch in the related art;

2 is a flowchart of a method for learning a MAC address in a virtual local area network of a switch according to an embodiment of the present invention;

3 is a structural block diagram of a device for learning a MAC address in a virtual local area network of a switch according to an embodiment of the present invention;

4 is a schematic diagram of MAC restriction priority classification according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of a MAC restriction dynamic waterline in a virtual local area network according to an embodiment of the present invention; FIG.

6 is a schematic diagram of communication of a rack switch according to an embodiment of the present invention;

7 is a flowchart (corresponding to a user setting manner) of a method for learning a MAC address in a virtual local area network of a switch according to a preferred embodiment of the present invention;

FIG. 8 is a flowchart (corresponding to a dynamic limit setting manner) of a method for learning a MAC address in a virtual local area network of a switch according to a preferred embodiment of the present invention.

Embodiments of the invention

Embodiments of the present invention will be described in detail below with reference to the accompanying drawings. It should be noted that, in the case of no conflict, the features in the embodiments and the embodiments in the present application may be arbitrarily combined with each other.

It is to be understood that the terms "first", "second" and the like in the specification and claims of the present invention are used to distinguish similar objects, and are not necessarily used to describe a particular order or order.

In this embodiment, a method for learning a MAC address in a virtual local area network of a switch is provided. FIG. 2 is a flowchart of a method for learning a MAC address in a virtual local area network of a switch according to an embodiment of the present invention. As shown in FIG. 2, the process includes The following steps:

Step S202: Determine whether the number of learned MAC addresses in the virtual local area network reaches a limit condition, where the restriction condition includes one of the following: a preset threshold, and a preset dynamic watermark value.

Step S204, if it is determined that the number of MAC addresses learned in the virtual local area network reaches a limit condition, stop learning the MAC address received after the restriction condition is reached, and process the MAC address received after the restriction condition is processed according to a preset manner. A packet, where the preset mode includes one of the following: forwarding, discarding.

Through the above steps, comparing the number of MAC addresses learned in the virtual local area network in different situations with the restriction conditions corresponding to the virtual local area network, and learning in the virtual local area network In the case that the number of MAC addresses reaches the corresponding limit, in order to avoid affecting the operation of other virtual local area networks, the learning of MAC addresses in the virtual local area network is stopped, and the received messages after the exceeding of the restriction conditions are discarded or forwarded. The problem that the MAC address of the virtual LAN of the switch cannot be controlled in the related art is solved, thereby achieving the effect of improving the stability of the operation of the virtual local area network.

If the size of the virtual local area network is known, the constraint is a preset threshold; if the size of the virtual local area network is unknown, the constraint is a preset dynamic watermark value.

In this embodiment, if the constraint condition is a preset dynamic waterline value, the preset dynamic watermark value includes a first preset dynamic watermark value, wherein determining whether the number of learned MAC addresses in the virtual local area network reaches a limit The condition includes: collecting the sum of the learned MAC addresses in all the virtual local area networks of the switch, and obtaining the first total MAC address; determining whether the first total MAC address reaches the first preset dynamic watermark value, wherein the first preset dynamic water The line value is the product of the second total MAC address and the percentage of the first preset dynamic water line, and the second total MAC address is the sum of the MAC addresses in all the virtual local area networks, wherein the first total MAC address is determined to reach the first preset. In the case of a dynamic watermark value, it is determined that the number of learned MAC addresses in the virtual local area network reaches a limit condition. The first preset dynamic waterline percentage can be set according to requirements, for example: 70%.

In this embodiment, the preset dynamic watermark value further includes a second preset dynamic watermark value, wherein determining whether the number of learned MAC addresses in the virtual local area network reaches the limiting condition further includes: determining the first total MAC address If the address does not reach the first preset dynamic watermark value, it is determined whether the first total MAC address reaches the second preset dynamic watermark value, wherein the second preset dynamic watermark value is the second total MAC address and the first The product of the preset dynamic watermark percentage, and the second preset dynamic watermark value is smaller than the first preset dynamic watermark value, wherein the first total MAC address is determined to reach the second preset dynamic watermark value Next, it is determined that the number of MAC addresses learned in the virtual local area network reaches a limit condition. The second dynamic waterline percentage can also be set according to demand, but less than the first dynamic waterline percentage, for example: 50%.

In this embodiment, when it is determined that the first total MAC address reaches the first preset dynamic watermark value, the method further includes the following steps:

In step S1, the number of MAC addresses in each virtual local area network in all virtual local area networks is obtained.

Step S2, determining the number of MAC addresses in the first target virtual local area network in all virtual local area networks Whether it is greater than or equal to the first preset dynamic watermark value.

In step S3, when it is determined that the number of MAC addresses in the first target virtual local area network is greater than or equal to the first preset dynamic watermark value in all the virtual local area networks, setting a limit value of the number of MAC addresses in the first target virtual local area network is first. The number of learned MAC addresses in the target virtual local area network, and deletes the MAC addresses learned in the first target virtual local area network but not used within the preset time period, that is, the number of MAC addresses in the first target virtual local area network is set. After the limit value, the aging speed of the learned MAC address in the first target virtual local area network is also accelerated, so that users who have long occupied resources but have not used for a long time go offline, and accelerate the aging of some malicious attacks occupying resource MAC addresses. .

In step S4, if it is determined that the number of MAC addresses in the first target virtual local area network is smaller than the first preset dynamic watermark value in all the virtual local area networks, determine whether the number of MAC addresses in the first target virtual local area network is greater than or equal to the average value of the MAC addresses. Wherein the MAC address average is the quotient of the second total MAC address and the number of all virtual local area networks.

In step S5, if it is determined that the number of MAC addresses in the first target virtual local area network is greater than or equal to the average value of the MAC address, setting a limit value of the number of MAC addresses in the first target virtual local area network is a second preset dynamic watermark value, and Deleting the MAC address learned in the first target virtual local area network but not used in the preset time period, wherein the second preset dynamic water line value is the product of the second total MAC address and the second preset dynamic water line percentage And the second preset dynamic watermark value is less than the first preset dynamic watermark value.

Step S6: In the case that it is determined that the number of MAC addresses in the first target virtual local area network is smaller than the average value of the MAC address, setting a limit value of the number of MAC addresses in the first target virtual local area network is a MAC address average value.

It should be noted that, in a case that the first total MAC address is determined to reach the first preset dynamic watermark value, each virtual local area network in the entire virtual local area network is completed in the virtual local area network by performing the foregoing steps S1 to S6. The setting of the limit value of the number of MAC addresses, that is, each of the virtual local area networks in the entire virtual local area network is sequentially performed as the first target virtual local area network to perform the above steps S1 to S6.

In this embodiment, when it is determined that the first total MAC address reaches the second preset dynamic watermark value, the method further includes the following steps:

In step S7, the number of MAC addresses in each virtual local area network in all virtual local area networks is obtained.

In step S8, it is determined whether the number of MAC addresses in the second target virtual local area network in all the virtual local area networks is greater than or equal to the average value of the MAC addresses, and the average value of the MAC addresses is the quotient of the second total MAC address and the number of all virtual local area networks.

Step S9: When it is determined that the number of MAC addresses in the second target virtual local area network is greater than or equal to the average value of the MAC address in all the virtual local area networks, setting a limit value of the number of MAC addresses in the second target virtual local area network is a first preset dynamic water. Line value.

Step S10: If it is determined that the number of MAC addresses in the second target virtual local area network is smaller than the average value of the MAC address in all the virtual local area networks, setting a limit value of the number of MAC addresses in the second target virtual local area network is a second total MAC address.

It should be noted that, in a case that the first total MAC address is determined to reach the second preset dynamic watermark value, each virtual local area network in the entire virtual local area network is completed in the virtual local area network by performing the foregoing steps S7 to S10. The setting of the limit value of the number of MAC addresses, that is, each of the virtual local area networks in the entire virtual local area network is sequentially performed as the second target virtual local area network to perform the above steps S7 to S10.

In this embodiment, after the limit value of the number of MAC addresses in the second target virtual local area network is set to be the first preset dynamic watermark value, the method further includes: determining a priority range in which the second target virtual local area network is in, wherein, priority The level range is used to indicate whether to continue learning the MAC address in the second target virtual local area network. That is, if the second target virtual local area network has a higher priority range, the second target virtual local area network can continue to learn the MAC address, and if the second target virtual local area network is in a lower priority range, the second target virtual local area network stops learning. MAC address.

In this embodiment, a device for learning a MAC address in a virtual local area network of a switch is also provided. The device is used to implement the foregoing embodiments and preferred embodiments, and details are not described herein. As used below, the term "module" may implement a combination of software and/or hardware of a predetermined function. Although the apparatus described in the following embodiments is preferably implemented in software, hardware, or a combination of software and hardware, is also possible and contemplated.

FIG. 3 is a structural block diagram of a device for learning a MAC address in a virtual local area network of a switch according to an embodiment of the present invention. As shown in FIG. 3, the device includes:

The first determining module 32 is configured to determine whether the number of learned MAC addresses in the virtual local area network reaches a limiting condition, where the limiting condition includes one of the following: a preset threshold, and a preset dynamic watermark value.

The processing module 34 is configured to, after determining that the number of MAC addresses learned in the virtual local area network reaches a limiting condition, stop learning the MAC address received after reaching the limiting condition, and receive the received condition according to the preset manner. A MAC address packet, where the preset mode includes one of the following: forwarding, and discarding.

Through the foregoing apparatus, the number of MAC addresses learned in the virtual local area network in different situations is compared with the limitation condition corresponding to the virtual local area network, and the number of learned MAC addresses in the virtual local area network reaches the corresponding limiting condition. In this case, in order to avoid affecting the operation of other virtual local area networks, the learning of the MAC address in the virtual local area network is stopped, and the received packets are discarded or forwarded after the limitation condition is exceeded. The problem of the MAC address, in turn, achieves the effect of improving the stability of the virtual local area network.

In this embodiment, if the constraint condition is a preset dynamic waterline value, the preset dynamic watermark value includes a first preset dynamic watermark value, wherein the first determining module 32 includes a statistical unit and a first determining unit. among them:

The statistic unit is configured to count the sum of the learned MAC addresses in all virtual local area networks of the switch to obtain the first total MAC address.

The first determining unit is configured to determine whether the first total MAC address reaches a first preset dynamic watermark value, wherein the first preset dynamic watermark value is a product of the second total MAC address and the first preset dynamic watermark percentage The second total MAC address is the sum of the MAC addresses in all the virtual local area networks, wherein, in the case that the first total MAC address is determined to reach the first preset dynamic watermark value, the number of learned MAC addresses in the virtual local area network is determined. Reach the restrictions. The first preset dynamic waterline percentage can be set according to requirements, for example: 70%.

In this embodiment, the preset dynamic watermark value further includes a second preset dynamic watermark value, wherein A judging module 32 further includes a second judging unit, wherein:

The second determining unit is configured to determine whether the first total MAC address reaches the second preset dynamic watermark value, if the first total MAC address does not reach the first preset dynamic watermark value, wherein the second pre- The dynamic watermark value is a product of a second total MAC address and a second preset dynamic waterline percentage, and the second preset dynamic watermark value is smaller than the first preset dynamic watermark value, wherein the first total is determined When the MAC address reaches the second preset dynamic watermark value, it is determined that the number of learned MAC addresses in the virtual local area network reaches a limit condition. The second dynamic waterline percentage can also be set according to demand, but less than the first dynamic waterline percentage, for example: 50%.

In this embodiment, the device further includes a first obtaining module, a second determining module, a first setting module, a third determining module, a second setting module, and a third setting module, where:

The first obtaining module is configured to acquire the number of MAC addresses in each virtual local area network in all virtual local area networks when it is determined that the first total MAC address reaches the first preset dynamic watermark value.

The second determining module is configured to determine whether the number of MAC addresses in the first target virtual local area network in all the virtual local area networks is greater than or equal to the first preset dynamic water line value.

The first setting module is configured to set a limit value of the number of MAC addresses in the first target virtual local area network when determining that the number of MAC addresses in the first target virtual local area network is greater than or equal to the first preset dynamic water line value in all the virtual local area networks The number of MAC addresses learned in the first target virtual local area network, and deleting the MAC address learned in the first target virtual local area network but not used in the preset time period, that is, in setting the first target virtual local area network After the limit of the number of MAC addresses, the aging rate of learned MAC addresses in the first target virtual local area network is also accelerated, so that users who have long occupied resources but have not used for a long time go offline, and accelerate aging. Some malicious attacks occupy resources. MAC address.

The third determining module is configured to determine whether the number of MAC addresses in the first target virtual local area network is greater than or equal to the MAC, if it is determined that the number of MAC addresses in the first target virtual local area network is less than the first preset dynamic watermark value in all the virtual local area networks. The address average, where the MAC address average is the quotient of the second total MAC address and the number of all virtual local area networks.

The second setting module is configured to set the MAC address in the first target virtual local area network when determining that the number of MAC addresses in the first target virtual local area network is greater than or equal to the average value of the MAC address The limit value of the quantity is a second preset dynamic waterline value, and the MAC address learned in the first target virtual local area network but not used in the preset time period is deleted, wherein the second preset dynamic watermark value is The product of the total MAC address and the second preset dynamic waterline percentage, and the second preset dynamic watermark value is smaller than the first preset dynamic watermark value.

The third setting module is configured to set a limit value of the number of MAC addresses in the first target virtual local area network to a MAC address average value when it is determined that the number of MAC addresses in the first target virtual local area network is smaller than the average value of the MAC address.

It should be noted that, when it is determined that the first total MAC address reaches the first preset dynamic watermark value, each virtual local area network in the entire virtual local area network is invoked by the first obtaining module, the second determining module, and the first The setting module, the third determining module, the second setting module, and the third setting module complete setting of a limit value of the number of MAC addresses in the virtual local area network, that is, each virtual local area network in the entire virtual local area network is sequentially used as the first The target virtual local area network invokes the first obtaining module, the second determining module, the first setting module, the third determining module, the second setting module, and the third setting module.

In this embodiment, the device further includes a second obtaining module, a fourth determining module, a fourth setting module, and a fifth setting module, where:

The second obtaining module is configured to obtain the number of MAC addresses in each virtual local area network in all virtual local area networks when it is determined that the first total MAC address reaches the second preset dynamic watermark value.

The fourth determining module is configured to determine whether the number of MAC addresses in the second target virtual local area network in all the virtual local area networks is greater than or equal to the average value of the MAC addresses, and the average value of the MAC addresses is the quotient of the second total MAC address and the number of all virtual local area networks.

The fourth setting module is configured to set a limit value of the number of MAC addresses in the second target virtual local area network to be the first pre-determined in the case that the number of MAC addresses in the second target virtual local area network is greater than or equal to the average value of the MAC address in all the virtual local area networks. Set the dynamic watermark value.

The fifth setting module is configured to set a limit value of the number of MAC addresses in the second target virtual local area network to a second total MAC address when it is determined that the number of MAC addresses in the second target virtual local area network is less than the average value of the MAC address in all the virtual local area networks. .

It should be noted that, when it is determined that the first total MAC address reaches the second preset dynamic watermark value In this case, each virtual local area network in the entire virtual local area network completes the setting of the limit value of the number of MAC addresses in the virtual local area network by calling the second obtaining module, the fourth determining module, the fourth setting module, and the fifth setting module. That is, each of the virtual local area networks in the entire virtual local area network is sequentially used as the second target virtual local area network to invoke the second obtaining module, the fourth determining module, the fourth setting module, and the fifth setting module.

In this embodiment, the apparatus further includes a determining module, wherein the determining module is configured to determine that the second target virtual local area network is located after setting a limit value of the number of MAC addresses in the second target virtual local area network to a first preset dynamic water line value The priority range, wherein the priority range is used to indicate whether to continue learning the MAC address in the second target virtual local area network.

The following detailed description will be made in conjunction with the preferred embodiments and embodiments.

If the size of the virtual local area network is known, the learning method of the MAC address in the virtual LAN of the switch may also be referred to as a user configuration mode; if the size of the virtual local area network is unknown, the learning method of the MAC address in the virtual local area network of the switch may also be referred to as a dynamic limiting manner. . That is, the method for learning the MAC address in the virtual LAN of the switch provided by the present application is divided into two implementation methods for the user scale: if it is a known scale, the user configuration mode is adopted; if it is an unknown scale, the switch provides a Dynamic restriction method. After the two methods reach the limit, the MAC resources are controlled in the following three ways: Specifically, the method is used to speed up the aging process, and the users who use resources for a long time but are not used for a long time go offline, and accelerate the aging. Some malicious attacks occupy resources. MAC address; mode 2: disable MAC address learning in certain VLANs; mode 3: configure different MAC address priorities, and use different learning policies for different priorities.

However, whether the user configuration mode or the dynamic restriction mode requires the user to perform related configuration first, the virtual local area network X is taken as an example, and the specific description is as follows:

Configuration 1: Set the threshold of the number of MAC addresses in the virtual LAN X of the rack switch in the user configuration mode to LIMITx.

Configuration 2: In the user configuration mode, the packets of the source MAC address that are exceeded when the number of MAC addresses reaches the threshold LIMITx are directly dropped or forwarded.

Configuration 3: Whether to enable the dynamic limit function of all VLANs; if it is on, autolimit=1; if it is off, autolimit=0.

Configuration 4: User configured dynamic waterline percentage. For example, the first dynamic waterline percentage is a%, and the second dynamic waterline percentage is b%. It should be noted that the number of the above dynamic water lines is temporarily defined by two, but is not limited to two.

Configuration 5: Configure MAC learning policies of different priority ranges to allow MAC learning of the priority virtual local area network X. If allowed, prioXlearn=1; if not allowed, prioXlearn=0. FIG. 4 is a schematic diagram of MAC priority prioritization according to an embodiment of the present invention. For specific priority classification settings, see FIG. 4.

The user configuration mode is configured by using configuration 1 and configuration 2; the dynamic restriction mode is configured by using configuration 3, configuration 4, configuration 5, and configuration 2.

FIG. 5 is a schematic diagram of a MAC restricted dynamic watermark in a virtual local area network according to an embodiment of the present invention. As shown in Figure 5, the dynamic limit mode is to compare the number of MAC addresses of all VLANs of a network device (for example, a switch) with several dynamic water lines configured by the user. After different dynamic water lines are reached, different VLANs are set differently. The MAC address limit value can ensure that there are available MAC resources in each VLAN, and allocate more MAC resources to VLANs that require more MAC resources, so that the allocation of MAC resources is more reasonable.

6 is a schematic diagram of communication of a rack switch according to an embodiment of the present invention. The working process of the main control terminal and the line card terminal in the rack switch is described in Figure 6 for the user configuration mode.

Host:

It is mainly responsible for counting the number of MAC addresses in each virtual local area network learned by all line cards. For the virtual local area network X with configuration 1, when the number of MAC addresses in the virtual local area network X reaches the threshold LIMITx, it is responsible for notifying all the lines. Card Message 1: Stop learning the physical address in Virtual LAN X, and notify all line card discards (if configuration 2 is drop) or directly forward (if configuration 2 is forward) packets that exceed the threshold portion according to configuration 2. And delete the MAC address that exceeds the threshold but has been reported to the master.

When the number of MAC addresses in the virtual local area network X is less than the threshold, it is responsible for notifying all the line card messages 2: opening the physical address learning in the virtual local area network X and not discarding the message.

Line card end:

After receiving the packets with different source MAC addresses, all line card hardware reports the MAC address information to the line card CPU, and the line card CPU sends a message to the CPU of the host. All the line cards mainly control the hardware to no longer report the MAC address exceeding the threshold part by setting the programmable logic device after receiving the message 1 of the master control, and the driver sends the message that exceeds the threshold part according to the configuration 2 (discard or directly Forward). And delete the MAC address that exceeds the threshold deleted by the master notification.

All line cards control the hardware to open the MAC learning in the virtual local area network through the programmable logic device after receiving the message 2 of the host.

It should be noted that the programmable logic device should have the following functions: 1. Discard the source MAC address limit message; 2. Set the VLAN-based source MAC address limit threshold.

Take the rack switch as an example. In the dynamic limit mode, the working process of the master and line card in the rack switch is as follows: After the function of dynamically limiting the number of MACs in all VLANs is enabled, the master needs to monitor the current status in real time. When the total number of learned MACs reaches the different watermarks, you need to adopt some strategies to set different MAC limit values for different VLANs and notify the line card to set the hardware. The method of speeding up the aging process is adopted in the VLAN that occupies more MAC resources, so that the MAC that is not used for a long time is rapidly aged and the MAC resources are released. And according to the different priorities configured in configuration 5, some priority MAC learning is reserved, and some lower priority MAC learning is turned off. After the water line is lower than the water line, the limit is lower than the water line. When the water line is lower than the lowest water line, MAC learning is no longer restricted, and the line card is set to set the hardware.

Take the box switch as an example. The dynamic limit mode is described as follows: After the dynamic limit of the number of MAC addresses in all VLANs is enabled, the switch CPU needs to monitor the total number of MACs learned by all VLANs in real time, and the total number of MACs learned. When different watermarks are reached, some strategies are needed to set different MAC limit values for different VLANs. The method of speeding up the aging process is adopted in the VLAN that occupies more MAC resources, so that the MAC that is not used for a long time is rapidly aged and the MAC resources are released. And according to the different priorities configured in configuration 5, some priority MAC learning is reserved, and some lower priority MAC learning is turned off. After being below the different waterline, the recovery is lower than The waterline is limited in its way of limiting MAC learning when it is below the minimum waterline.

FIG. 7 is a flowchart of a method for learning a MAC address in a virtual local area network of a switch according to a preferred embodiment of the present invention. The preferred embodiment corresponds to a user setting manner in the foregoing content. As shown in FIG. 7, the process includes:

In step S702, all the line cards of the rack switch receive a total of y packets with different source MAC addresses in the virtual local area network X, where y>=LIMITx.

In step S704, the chip of each line card learns the CPU (the central processing unit) of the MAC reporting line card itself.

Step S706, the CPU of each line card reports the learned MAC address information (including the MAC address + VLAN + port number) to the master of the rack switch through inter-board communication.

Step S708, the master controller of the rack switch adds the received MAC message to the MAC table of the software management MAC address, and the table records information about all learned MAC address information (including MAC address + VLAN + port number). .

Step S710, determining whether the number of MAC addresses (ie, y) in the virtual local area network X managed by the software monitoring the master of the rack switch reaches LIMITx. If LIMITx is reached, then the process goes to step S712; if LIMITx is not reached, the monitoring is continued, and the process goes to step S710.

Step S712, notifying all line cards of the rack switch to close the MAC address learning in the VLAN.

In step S714, it is determined whether the restriction policy of the current configuration 2 is forward or drop (determined by configuration 2). If it is forward, then go to step S716; if it is drop, then go to step S718.

In step S716, all the line card issuing registers in the virtual local area network X are not allowed to perform MAC address learning again, and the processing method of the message without the learning source MAC is directly forwarded. At this time, only the MAC address learning of the virtual local area network X is restricted. The packets of the MAC address can be forwarded normally, and the MAC addresses of other virtual LANs can still be learned normally, and the packets can be forwarded normally.

In step S718, the MAC address learning is not allowed in all the line card delivery hardware (drive) virtual local area network X, and the processing of the message without the learning source MAC address is discarded. At this time, only the virtual The MAC learning of the proposed local area network X is restricted, and the packets of the MAC address can be forwarded normally, and the MAC addresses of other virtual local area networks can still be learned normally, and the packets can be forwarded normally.

In step S720, after the number of MAC addresses (ie, y) in the virtual LAN X of the software management of the master of the rack switch is monitored to reach the threshold LIMITx of the configuration 1, it is determined whether the MAC is manually deleted for some reason (such as MAC aging). Etc.) The total number of MAC addresses in Virtual LAN X is less than LIMITx. If yes, go to step S722, if not, continue monitoring, and go to step S720.

In step S722, the main controller of the rack switch sends a message for releasing the MAC address limit in the virtual local area network X to all the line cards, and all the messages are resumed and forwarded normally. At this time, the MAC addresses of other virtual LANs can still be learned normally, and all packets can be forwarded normally.

In step S724, after receiving the message sent by the master control, all the line cards send the hardware (drive) to allow the MAC address in the virtual local area network X to learn, and all the messages resume normal forwarding. Then skip to step S710.

FIG. 8 is a flowchart of a method for learning a MAC address in a virtual local area network of a switch according to a preferred embodiment of the present invention. The preferred embodiment corresponds to a dynamic limit setting manner in the foregoing content. As shown in FIG. 8, the process includes:

In step 802, the switch configures n (n>1) virtual local area networks.

In step 804, the switch CPU monitors in real time whether the sum of the learned MACs in all the current VLANs reaches a certain dynamic waterline (assuming a>=50%).

Step 806, when learning that the sum of MACs learned in all VLANs reaches the watermark (total MAC address *a%), skip to step 808, when the sum of MACs learned in all VLANs reaches the watermark (MAC) When the total number of addresses *b%), (b>a) jumps to step 812.

In step 808, the number of MAC addresses in all VLANs is checked, and different restrictions are adopted for different VLANs. For example, if the number of VLANs is greater than or equal to (the total number of MAC addresses / n), set the MAC address limit value in the VLAN (the total number of MAC addresses * a%), and then skip to step 810; if a VLAN If the number of MAC addresses is less than (the total number of MAC addresses/n), set the limit value of the number of MACs in the VLAN (the total number of MAC addresses), that is, the VLAN is not restricted. MAC learning within.

Step 810: Determine whether the MAC in the priority range of the current configuration 4 is allowed to continue learning. If allowed, continue to allow MAC learning by setting hardware; if prohibited, disable MAC learning of the MAC range by setting hardware.

In step 812, the number of MACs in all VLANs is checked, and different restrictions are adopted for different VLANs. If the number of the VLANs is greater than or equal to (the total number of MAC addresses *a%), set the MAC limit value in the VLAN to the MAC value learned by the current VLAN, and skip to step 814; If the number is less than (the total number of MAC addresses *a%), continue to determine whether the number of MAC addresses in a certain VLAN is greater than or equal to (the total number of MAC addresses / n), if the number of MACs in one of the above VLANs is greater than or equal to (the total number of MAC addresses) Quantity / n), set the MAC limit value in the VLAN (total MAC address * a%), and jump to step 814; if the number of MACs in one of the above VLANs is less than (the total number of MAC addresses / n), Then set the MAC limit value in the VLAN (the total number of MAC addresses / n).

Step 814: Perform fast aging on the VLAN that has occupied more MAC resources, speed up the aging process, and delete the MAC address that has not been updated for a long time.

In addition, an embodiment of the present invention further provides a computer readable storage medium storing computer executable instructions, which are implemented when executed by a processor.

One of ordinary skill in the art will appreciate that all or a portion of the above steps may be performed by a program to instruct related hardware, such as a processor, which may be stored in a computer readable storage medium, such as a read only memory, disk or optical disk. Wait. Alternatively, all or part of the steps of the above embodiments may also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the above embodiment may be implemented in the form of hardware, for example, by implementing an integrated circuit to implement its corresponding function, or may be implemented in the form of a software function module, for example, executing a program stored in the memory by a processor. Instructions to achieve their corresponding functions. This application is not limited to any specific combination of hardware and software.

It should be noted that various other embodiments and modifications may be made by those skilled in the art without departing from the spirit and scope of the application, Corresponding changes and modifications are intended to fall within the scope of the appended claims.

Industrial applicability

The technical solution provided by the embodiment of the present invention determines whether the number of learned MAC addresses in the virtual local area network reaches a limit condition, wherein the constraint condition is one of the following: a preset threshold and a preset dynamic watermark value; If the number of MAC addresses learned in the local area network reaches the limit condition, the MAC address received after the restriction condition is stopped, and the MAC address received after the restriction condition is processed according to a preset manner, where the preset is preset. The method includes one of the following: forwarding or discarding, which solves the problem that the related technology cannot control the learning MAC address of the switch virtual local area network, thereby achieving the effect of improving the stability of the virtual local area network.

Claims

A method for learning a MAC address in a virtual LAN of a switch, comprising:

Determining whether the number of learned MAC addresses in the virtual local area network reaches a limit condition, where the limitation condition includes one of the following: a preset threshold, a preset dynamic watermark value;

When it is determined that the number of learned MAC addresses in the virtual local area network reaches the restriction condition, stopping learning the MAC address received after reaching the restriction condition, and receiving the restriction condition according to a preset manner, and receiving the The packet of the MAC address to which the preset mode includes one of the following: forwarding, discarding.
The method of claim 1 wherein:

If the limit condition is a preset dynamic watermark value, determining whether the number of learned MAC addresses in the virtual local area network reaches a limit condition includes:

Counting the sum of the learned MAC addresses in all the virtual local area networks of the switch, and obtaining the first total MAC address;

Determining whether the first total MAC address reaches a first preset dynamic watermark value, wherein the first preset dynamic watermark value is a product of a second total MAC address and a percentage of a first preset dynamic waterline, Said second total MAC address is the sum of MAC addresses in all said virtual local area networks,

And determining, in the case that the first total MAC address reaches the first preset dynamic watermark value, determining that the number of learned MAC addresses in the virtual local area network reaches the restriction condition.
The method of claim 2 wherein:

Determining whether the number of learned MAC addresses in the virtual local area network reaches a limit condition further includes:

When it is determined that the first total MAC address does not reach the first preset dynamic watermark value, determining whether the first total MAC address reaches a second preset dynamic watermark value, wherein the first The second preset dynamic watermark value is a product of the second total MAC address and a second preset dynamic waterline percentage, and the second preset dynamic watermark value is smaller than the first preset dynamic watermark value,

Wherein, determining that the first total MAC address reaches the second preset dynamic watermark value In case, it is determined that the number of learned MAC addresses in the virtual local area network reaches the constraint condition.
The method of claim 2 wherein:

And determining that the first total MAC address reaches the first preset dynamic watermark value, the method further includes:

Obtaining the number of MAC addresses in each of the virtual local area networks in the virtual local area network;

Determining whether the number of MAC addresses in the first target virtual local area network in all the virtual local area networks is greater than or equal to the first preset dynamic water line value;

Setting a limit value of the number of MAC addresses in the first target virtual local area network, if it is determined that the number of MAC addresses in the first target virtual local area network is greater than or equal to the first preset dynamic watermark value in all the virtual local area networks And the number of learned MAC addresses in the first target virtual local area network, and deleting the MAC addresses learned in the first target virtual local area network but not used in the preset time period;

If it is determined that the number of MAC addresses in the first target virtual local area network is smaller than the first preset dynamic watermark value in all the virtual local area networks, determine whether the number of MAC addresses in the first target virtual local area network is greater than or equal to the MAC address. An address average, wherein the MAC address average is a quotient of the second total MAC address and the number of all the virtual local area networks;

When it is determined that the number of MAC addresses in the first target virtual local area network is greater than or equal to the average value of the MAC addresses, setting a limit value of the number of MAC addresses in the first target virtual local area network is a second preset dynamic watermark value, And deleting the MAC address learned in the first target virtual local area network but not used in the preset time period, wherein the second preset dynamic watermark value is the second total MAC address and the second pre- Setting a product of a dynamic waterline percentage, and the second preset dynamic watermark value is less than the first preset dynamic watermark value;

When it is determined that the number of MAC addresses in the first target virtual local area network is smaller than the average value of the MAC addresses, setting a limit value of the number of MAC addresses in the first target virtual local area network is the average value of the MAC addresses.
The method of claim 3 wherein:

After determining that the first total MAC address reaches the second preset dynamic watermark value, The method further includes:

Obtaining the number of MAC addresses in each of the virtual local area networks in the virtual local area network;

Determining whether the number of MAC addresses in the second target virtual local area network in the virtual local area network is greater than or equal to a MAC address average value, where the average value of the MAC address is a quotient of the second total MAC address and the number of all the virtual local area networks. ;

When it is determined that the number of MAC addresses in the second target virtual local area network is greater than or equal to the average value of the MAC addresses in all the virtual local area networks, setting a limit value of the number of MAC addresses in the second target virtual local area network is the a preset dynamic waterline value;

When it is determined that the number of MAC addresses in the second target virtual local area network is smaller than the average value of the MAC address in all the virtual local area networks, setting a limit value of the number of MAC addresses in the second target virtual local area network is the second total MAC address. .
The method of claim 5 wherein:

After the setting of the limit value of the number of MAC addresses in the second target virtual local area network is the first preset dynamic watermark value, the method further includes:

Determining a priority range in which the second target virtual local area network is located, wherein the priority range is used to indicate whether to continue learning the MAC address in the second target virtual local area network.
A learning device for MAC address in a virtual LAN of a switch, comprising:

The first determining module is configured to determine whether the number of learned MAC addresses in the virtual local area network reaches a limiting condition, where the limiting condition includes one of the following: a preset threshold, a preset dynamic watermark value;

The processing module is configured to, after determining that the number of MAC addresses learned in the virtual local area network reaches the restriction condition, stop learning the MAC address received after reaching the constraint condition, and process the device according to a preset manner. The packet of the MAC address received after the restriction condition, where the preset manner includes one of the following: forwarding, discarding.
The device of claim 7 wherein:

If the constraint condition is a preset dynamic watermark value, the first determining module includes:

A statistical unit, configured to count the learned MACs in all of the virtual local area networks of the switch The sum of the addresses, the first total MAC address is obtained;

The first determining unit is configured to determine whether the first total MAC address reaches a first preset dynamic watermark value, wherein the first preset dynamic watermark value is a second total MAC address and a first preset dynamic The product of the percentage of the waterline, the second total MAC address being the sum of the MAC addresses in all of the virtual local area networks,

And determining, in the case that the first total MAC address reaches the first preset dynamic watermark value, determining that the number of learned MAC addresses in the virtual local area network reaches the restriction condition.
The device of claim 8 wherein:

The first determining module further includes:

The second determining unit is configured to determine whether the first total MAC address reaches the second preset dynamic waterline if it is determined that the first total MAC address does not reach the first preset dynamic watermark value a value, wherein the second preset dynamic watermark value is a product of the second total MAC address and a second preset dynamic waterline percentage, and the second preset dynamic watermark value is smaller than the first Preset dynamic watermark value,

And determining, in the case that the first total MAC address reaches the second preset dynamic watermark value, determining that the number of learned MAC addresses in the virtual local area network reaches the restriction condition.
The apparatus of claim 8 further comprising:

a first acquiring module, configured to acquire, in the case that the first total MAC address reaches the first preset dynamic watermark value, the number of MAC addresses in each of the virtual local area networks ;

a second determining module, configured to determine whether the number of MAC addresses in the first target virtual local area network in all the virtual local area networks is greater than or equal to the first preset dynamic water line value;

a first setting module, configured to set the first target virtual local area network if it is determined that the number of MAC addresses in the first target virtual local area network is greater than or equal to the first preset dynamic water line value in all the virtual local area networks The limit of the number of internal MAC addresses is the number of learned MAC addresses in the first target virtual local area network, and deleting the learning in the first target virtual local area network The MAC address that was not used within the preset time period;

The third determining module is configured to determine, in the first target virtual local area network, that the number of MAC addresses in the first target virtual local area network is smaller than the first preset dynamic water line value in the virtual local area network of the all-out part Whether the number of MAC addresses is greater than or equal to the average value of the MAC addresses, wherein the average value of the MAC addresses is a quotient of the second total MAC address and the number of all the virtual local area networks;

a second setting module, configured to set a limit value of the number of MAC addresses in the first target virtual local area network when the number of MAC addresses in the first target virtual local area network is greater than or equal to the average value of the MAC addresses Presetting a dynamic waterline value, and deleting a MAC address learned in the first target virtual local area network but not used in a preset time period, wherein the second preset dynamic watermark value is the second a product of a total MAC address and a second preset dynamic waterline percentage, and the second preset dynamic watermark value is less than the first preset dynamic watermark value;

a third setting module, configured to: when it is determined that the number of MAC addresses in the first target virtual local area network is smaller than the average value of the MAC address, setting a limit value of the number of MAC addresses in the first target virtual local area network is Average MAC address.
The apparatus of claim 9 further comprising:

a second obtaining module, configured to acquire, in the case that the first total MAC address reaches the second preset dynamic watermark value, the number of MAC addresses in each of the virtual local area networks ;

a fourth determining module, configured to determine whether the number of MAC addresses in the second target virtual local area network in all the virtual local area networks is greater than or equal to a MAC address average value, wherein the MAC address average value is the second total MAC address and all the The quotient of the number of virtual local area networks;

a fourth setting module, configured to set the number of MAC addresses in the second target virtual local area network, if it is determined that the number of MAC addresses in the second target virtual local area network is greater than or equal to the average value of the MAC address in all the virtual local area networks The limit value is the first preset dynamic watermark value;

a fifth setting module, configured to set a limit value of the number of MAC addresses in the second target virtual local area network when determining that the number of MAC addresses in the second target virtual local area network is smaller than the average value of the MAC address in all the virtual local area networks The second total MAC address.
The apparatus of claim 11 further comprising:

a determining module, configured to determine a priority range in which the second target virtual local area network is located after setting a limit value of the number of MAC addresses in the second target virtual local area network as the first preset dynamic water line value, where The priority range is used to indicate whether to continue learning the MAC address in the second target virtual local area network.